General
-
Target
00d5560b2dccfd2208190bc01158f3f041925091f913a1396569a6e14854c91b.exe
-
Size
707KB
-
MD5
c262f2b4af1c129ec1a62621f5910b8b
-
SHA1
8ccef925a70ff4cbdda39244896d3a5bf6a2100a
-
SHA256
00d5560b2dccfd2208190bc01158f3f041925091f913a1396569a6e14854c91b
-
SHA512
d96947e5fd6c327f776d3adaf3507d0ec3e5df9c438fb3310f291cac47468d0ddecc05b32527b8494810a9852d752ab5865e84a4f3a8836d1e120acf3bea4135
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8Xvnh:6uaTmkZJ+naie5OTamgEoKxLWf/h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
00d5560b2dccfd2208190bc01158f3f041925091f913a1396569a6e14854c91b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections